187 matches found
Directory traversal
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct...
httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles
httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles / Httpdx Server FTP v0.8 Remote Arbitrary Directories & files Vulnerability ------------------------------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when...
CVE-2009-1936
functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrar...
Simple Machines Forum (SMF) 1.x < 1.1.7 Multiple Vulnerabilities
Simple Machines Forum SMF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)
No description provided by source. / Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be exploited to read, modify, or delet...
Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit
Exploit for windows platform in category remote exploits ============================================================ Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit ============================================================ / Sysax Multi Server v4.3 Remote Delete Files. Server FTP...
Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit
/ Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be exploited to escape the...
RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories
RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on th...
Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit
Exploit for unknown platform in category remote exploits ========================================================= Serv-U 7.4.0.1 MKD Create Arbitrary Directories Exploit ========================================================= !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability ...
RhinoSoft Serv-U FTP Server 7.4.0.1 - 'MKD' Create Arbitrary Directories
!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on the system via directory traversal attacks using the ".." character...
GuildFTPd FTP Server 0.999.14 - Remote Delete Files
GuildFTPd FTP Server 0.999.14 - Remote Delete Files !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" request...
GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit
Exploit for unknown platform in category remote exploits ========================================================= GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit ========================================================= !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote...
GuildFTPd FTP Server 0.999.14 - Remote Delete Files
!/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be exploited to escape the FTP root and...
websvn -- multiple vulnerabilities
Secunia reports: Some vulnerabilities have been reported in WebSVN, which can be exploited by malicious users to disclose sensitive information, and by malicious people to conduct cross-site scripting attacks and manipulate data. Input passed in the URL to index.php is not properly sanitised befo...
Directory traversal
Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. d...
CVE-2007-6471
Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ dot dot backslash in the config parameter...
sentineldetails-traverse.txt
SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...
Directory traversal
The safepath function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the...
CVE-2006-7079
CVE-2006-7079 affects exV2 versions 2.0.4.3 and earlier, in include/common.php. The issue allows remote attackers to overwrite arbitrary program variables and perform directory traversal to execute arbitrary code by modifying xoopsOption['pagetype']. The initial docs provide CVSS data: CVSS v2 ba...
[SA16003] DownloadProtect "file" Disclosure of Sensitive Information
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...